$ rpki-client -vvf rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.mft File: IHRtqWxsk0jpS7t03MtZAcbst7M.mft (raw, json) Hash identifier: LPj0wnWbGEB2nfVBOPY8q6qUwu3VUmLOHxt3Y5d3rZs= Subject key identifier: 04:CA:C9:CE:10:6C:9F:CD:D3:B5:62:3B:7C:58:A1:28:4E:3A:FE:01 Authority key identifier: 20:74:6D:A9:6C:6C:93:48:E9:4B:BB:74:DC:CB:59:01:C6:EC:B7:B3 Certificate issuer: /CN=A918BD1A/serialNumber=20746DA96C6C9348E94BBB74DCCB5901C6ECB7B3 Certificate serial: 03FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHRtqWxsk0jpS7t03MtZAcbst7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.mft Manifest number: 03F6 Signing time: Mon 03 Nov 2025 00:27:26 +0000 Manifest this update: Mon 03 Nov 2025 00:27:26 +0000 Manifest next update: Mon 10 Nov 2025 00:27:26 +0000 Files and hashes: 1: IHRtqWxsk0jpS7t03MtZAcbst7M.crl (hash: 9OVTHxrPDwim8svsqj37z84GqM8YBZrF7ZUdORJroB4=) 2: FC11F400240611EFA8F45A54C4F9AE02.roa (hash: o33RNCZroDwsAJGcMgsni5M3q2cYV8AkaewWNhrky5w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.crl rsync://rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHRtqWxsk0jpS7t03MtZAcbst7M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:27:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1021 (0x3fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BD1A, serialNumber=20746DA96C6C9348E94BBB74DCCB5901C6ECB7B3 Validity Not Before: Nov 3 00:27:26 2025 GMT Not After : Nov 10 00:27:26 2025 GMT Subject: CN=6907f6ee-685d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:86:39:13:c9:aa:96:d9:86:6b:3b:79:f6:df: 10:55:44:31:5d:da:72:e1:27:72:cf:df:0d:f1:d8: 3a:e1:39:41:a1:e5:51:4f:e3:81:57:6d:47:df:37: 10:b5:57:44:4f:1e:b5:cc:ca:98:38:af:65:74:0b: aa:83:62:21:db:2c:ba:f3:0e:c2:17:a2:5d:62:88: b7:c6:d4:97:4a:65:c9:2d:0e:38:77:1e:de:40:89: 35:07:55:56:64:b6:9f:92:fe:36:d0:91:fa:c4:4f: dc:f8:95:ed:e4:e6:61:ab:c0:9d:48:2d:90:49:f8: e2:53:e0:66:f4:74:79:49:d0:dd:b2:38:8f:6f:58: 9c:25:fc:0a:cf:60:09:78:06:1d:ad:12:a4:68:76: e7:fc:9a:98:5a:53:23:85:97:ea:14:c9:0c:bd:27: a0:1e:09:b5:7c:c9:94:95:ce:0c:3e:f9:76:40:2c: 68:a3:6d:f3:c2:ea:56:25:20:1b:93:0c:65:f1:8b: 59:e1:23:e2:63:85:ca:7c:6e:c1:6c:ce:17:5a:b4: 3e:1c:2f:b6:ad:54:76:1a:76:ed:a3:0b:b8:9d:9b: 9c:16:ba:e4:e7:46:22:69:ae:1a:5e:29:ac:ce:66: 32:fb:98:1d:e3:7d:13:2c:c5:a6:44:89:1b:c1:f6: 60:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:CA:C9:CE:10:6C:9F:CD:D3:B5:62:3B:7C:58:A1:28:4E:3A:FE:01 X509v3 Authority Key Identifier: keyid:20:74:6D:A9:6C:6C:93:48:E9:4B:BB:74:DC:CB:59:01:C6:EC:B7:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IHRtqWxsk0jpS7t03MtZAcbst7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BD1A/4C6EABE899D811ECB9E3576FC4F9AE02/IHRtqWxsk0jpS7t03MtZAcbst7M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:b7:86:78:be:0f:97:5a:2c:4d:a3:d3:e0:d2:b8:ff:ad:03: 21:7c:53:96:a6:f0:47:3b:03:11:a0:c6:87:f8:49:3f:0d:72: b4:a4:1e:bc:64:05:cd:68:27:26:e0:39:34:89:c3:a9:86:72: 3f:b8:66:63:55:dd:03:76:71:dd:dc:7e:5b:e7:15:fc:29:db: 46:84:54:68:71:6c:94:cc:d1:1d:eb:47:22:9a:47:d6:af:05: 19:09:ce:ea:6d:17:ed:f1:13:ff:08:ba:61:a6:7e:df:f6:3e: 23:35:b4:6a:bb:93:7f:13:3e:a4:c1:33:ee:da:af:37:e6:d5: e3:23:57:8e:c7:1b:e7:78:12:1b:83:10:cd:67:07:34:c7:dd: 0e:df:0f:7a:06:5e:6d:09:8e:8e:0f:d4:4b:ff:8a:b7:99:83: c5:10:9c:89:bd:8d:32:a9:1d:57:4c:de:b6:ef:ce:56:31:3a: de:20:17:85:d2:b0:ad:71:47:1a:f2:ad:da:2c:90:24:e2:7c: 9c:61:58:7c:39:05:fa:f1:ae:45:88:04:f3:77:97:2c:ba:1f: 28:a3:b5:37:bf:ee:fc:e5:2b:e0:b0:33:e9:c4:62:8d:ca:45: 34:f0:5a:42:5b:82:6b:7a:2e:a8:b6:20:7a:b2:7a:3b:d7:96: e2:bc:a1:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJEMUExMTAvBgNVBAUTKDIwNzQ2REE5NkM2QzkzNDhFOTRCQkI3NERDQ0I1OTAx QzZFQ0I3QjMwHhcNMjUxMTAzMDAyNzI2WhcNMjUxMTEwMDAyNzI2WjAYMRYwFAYD VQQDEw02OTA3ZjZlZS02ODVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzoY5E8mqltmGazt59t8QVUQxXdpy4Sdyz98N8dg64TlBoeVRT+OBV21H3zcQ tVdETx61zMqYOK9ldAuqg2Ih2yy68w7CF6JdYoi3xtSXSmXJLQ44dx7eQIk1B1VW ZLafkv420JH6xE/c+JXt5OZhq8CdSC2QSfjiU+Bm9HR5SdDdsjiPb1icJfwKz2AJ eAYdrRKkaHbn/JqYWlMjhZfqFMkMvSegHgm1fMmUlc4MPvl2QCxoo23zwupWJSAb kwxl8YtZ4SPiY4XKfG7BbM4XWrQ+HC+2rVR2Gnbtowu4nZucFrrk50Yiaa4aXims zmYy+5gd430TLMWmRIkbwfZgFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFATKyc4Q bJ/N07ViO3xYoShOOv4BMB8GA1UdIwQYMBaAFCB0balsbJNI6Uu7dNzLWQHG7Lez MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkQxQS80QzZFQUJFODk5 RDgxMUVDQjlFMzU3NkZDNEY5QUUwMi9JSFJ0cVd4c2swanBTN3QwM010WkFjYnN0 N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lIUnRxV3hzazBqcFM3dDAzTXRaQWNic3Q3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QkQxQS80QzZFQUJFODk5RDgxMUVDQjlFMzU3NkZDNEY5QUUwMi9JSFJ0cVd4c2sw anBTN3QwM010WkFjYnN0N00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOt4Z4vg+XWixNo9Pg0rj/rQMhfFOWpvBHOwMRoMaH+Ek/DXK0pB68 ZAXNaCcm4Dk0icOphnI/uGZjVd0DdnHd3H5b5xX8KdtGhFRocWyUzNEd60cimkfW rwUZCc7qbRft8RP/CLphpn7f9j4jNbRqu5N/Ez6kwTPu2q835tXjI1eOxxvneBIb gxDNZwc0x90O3w96Bl5tCY6OD9RL/4q3mYPFEJyJvY0yqR1XTN62785WMTreIBeF 0rCtcUca8q3aLJAk4nycYVh8OQX68a5FiATzd5csuh8oo7U3v+785SvgsDPpxGKN ykU08FpCW4Jrei6otiB6sno715bivKEH -----END CERTIFICATE-----Generated at Wed Nov 5 00:24:10 2025 by rpki-client